Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
File: sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json)
Hash identifier: CFogmPz7AMi+Tj7Z5sJyG1bEgWKpj/M2ItqDpN0wv+U=
Subject key identifier: 90:0C:9C:3F:FB:81:D0:14:20:3A:3A:FF:62:5C:D1:B2:9F:42:EF:A5
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 019A725C80F5AF587D5391D9A74D9940C7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: 00GJlkuxjT-xB1LSuZloHmKQPmA.roa (hash: 9a/Biy4j/OZlZRXYUZR8+r88dbkZ+LAsW+76+eBVauw=)
2: mcZ_wFiKJ5ceIsgC2BUu4MFFKQo.roa (hash: T2KHfDIrrN3cj+Vf6WCXsB4RoiQ2FgY7quTVSGHtuCI=)
3: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: 2lVi0NJtb3MXG+EFGp3zxm84DhAYwvqN7LwZuWe5fl8=)
4: wgdhruz0xtRxWdWf--i6dPU1wQE.roa (hash: WcvpeOu2J24CdapCRKlSln4v+gu+O2IeoZu5OdQe1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:80:f5:af:58:7d:53:91:d9:a7:4d:99:40:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=900c9c3ffb81d014203a3aff625cd1b29f42efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:e5:f8:7f:a7:44:c0:e2:1a:25:d4:57:66:
8f:dd:84:e7:be:84:05:a2:c1:bb:f2:1d:ae:0d:ff:
05:54:43:6d:10:72:65:07:82:7b:7d:95:8c:78:41:
44:6b:bf:3a:6c:2a:52:38:6d:b8:22:7a:e3:ed:60:
83:e0:d2:7d:d9:26:62:70:d8:0c:e0:f2:02:3e:bd:
f9:6f:75:a3:77:f8:d4:9d:6e:b2:9b:1e:f6:e0:8d:
27:65:f7:4a:87:a5:0a:7e:af:3d:77:f6:38:4e:ac:
30:39:32:c2:30:09:84:95:f5:8e:6c:6e:11:26:98:
83:86:28:94:0e:1a:d5:27:22:fb:f6:9f:91:be:5d:
3f:bf:8a:5d:03:df:01:34:f7:6a:4c:8f:1f:47:30:
d5:0f:c1:54:25:42:f2:e3:61:e0:f8:2a:49:f6:be:
d4:a7:83:b4:fe:bd:22:5d:e5:53:ec:02:59:f9:b1:
e1:75:9a:84:62:f5:8d:6e:a5:9a:b2:5c:3e:34:c1:
87:07:1a:76:1f:e4:ef:07:b0:44:79:29:30:44:f3:
80:96:a6:5f:65:fc:42:46:da:8f:d0:53:7f:53:ef:
c8:de:68:98:f9:18:c2:7b:bd:10:d4:cc:25:32:13:
0b:29:7b:fe:25:66:5d:21:9c:09:3a:67:5c:ea:e2:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0C:9C:3F:FB:81:D0:14:20:3A:3A:FF:62:5C:D1:B2:9F:42:EF:A5
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bb:35:6d:c6:cb:9d:be:fd:5b:7d:30:1e:0c:56:82:e3:97:
8b:c8:f7:5e:81:a3:e5:f8:33:32:1e:47:c0:68:8e:f2:8c:ea:
3a:2e:1d:2c:02:55:4e:1a:83:e9:52:e6:a3:2c:e9:76:6f:87:
0f:f7:1e:d4:06:25:be:14:dc:da:53:bd:d7:48:66:7e:01:5e:
2c:45:54:f2:7b:14:ce:d1:10:5f:16:ba:38:cd:f0:4d:7c:00:
40:30:95:8b:d3:f2:37:94:33:e7:6a:03:16:fd:17:dc:f7:27:
1b:bd:6b:aa:db:01:a5:99:bb:00:54:dc:79:6b:22:c5:2c:e2:
d9:67:44:19:a4:22:a3:c6:5b:d9:48:cc:bb:63:99:aa:09:1d:
ae:94:39:0e:9e:b8:b2:bb:f0:c7:e8:07:00:49:0a:e9:d3:7e:
b5:6a:4f:0d:b3:f2:b8:8b:fe:aa:26:79:f1:c2:69:d5:59:fa:
d5:1b:93:58:38:41:54:a5:a3:01:1a:95:23:01:6f:5f:66:78:
e2:cc:ca:b2:b0:f9:1a:df:ea:b4:78:2a:8d:94:42:3b:34:71:
65:01:8a:a8:68:6b:91:c2:50:07:b8:50:d4:d7:55:c1:e1:2d:
ca:00:98:65:de:22:7f:90:14:a8:5f:39:61:12:59:b4:26:4e:
2b:a9:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:04 2025 by rpki-client